type = process
command = /usr/libexec/bastionguard/bastionguard-rootguard --policy /etc/bastionguard/rootguard.conf
restart = on-failure
smooth-recovery = true
restart-delay = 2
stop-timeout = 10
@meta enable-via boot
